VIA E-MAIL 


Mr. Edward Hasbrouck 
The Identity Project 
1736 Franklin Street 
9 th Floor 

Oakland, CA 94612 

Re: Freedom of Information Act Request - Interim Response #5 
Tracking Number: 15-FOI-00021 

Dear Mr. Hasbrouck: 

We are further responding to your October 29, 2014 request for information made under the Freedom of 
Information Act (FOIA), which was received via e-mail by Amtrak’s FOIA Office on the same date. 

Your request seeks the records described below: 

( 1 ) Any records of policies, procedures, technical specifications, contracts (including agency 
appointment agreements), or directives to staff, contractors, or agents pertaining to transfers of 
data about Amtrak passengers or customers to the Department of Homeland Security (DHS), any 
DHS component including US Customs and Border Protection (USCBP), the Canadian Border 
Services Agency (CBSA), any other Canadian government agency, or any other foreign 
government, or the subsequent handling or use of such data, including without limitation 
Advanced Passenger Information (API) and any personally identifiable data obtained or derived 
from the ARROW reservation system. 

(2) Any records pertaining to the legal basis for such data transfers, including any e-mail messages 
pertaining to this subject within or between Amtrak, Amtrak agents, Amtrak contractors, and any 
third party or parties. 

(3) Any records of policies, procedures, technical specifications, contracts (including agency 
appointment agreements), or directives to staff, contractors, or agents (including without 
limitation travel agencies and agents authorized to sell Amtrak tickets, and other ARROW users) 
regarding disclosures to be made concerning transfers of data about Amtrak passengers or 
customers to government agencies including DHS. 

(4) Any records of policies, procedures, reports, or directives to staff, contractors, or agents 
(including without limitation travel agencies and agents authorized to sell Amtrak tickets, and 
other ARROW users) regarding compliance with the Personal Information Protection and 
Electronic Documents Act (PIPEDA) of Canada, including handling of requests for records or 
other requests or complaints made pursuant to PIPEDA and any disclosures to be made to 
passengers or customers. 

(5) Any e-mail messages within or between Amtrak and Amtrak agents, Amtrak contractors, and any 
third party or parties containing any of the text strings "Personal Information Protection and 
Electronic Documents Act", "PIPEDA", or "Privacy Commissioner of Canada". 







